Critical severity9.8NVD Advisory· Published Dec 28, 2018· Updated Jun 17, 2026

CVE-2018-5204

Description

ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution.

Affected products

Infraware Global/ML Report
cpe:2.3:a:infraware-global:ml_report:*:*:*:*:*:*:*:*
Range: >=2.00.000.0000,<=2.18.628.5980
ML Report/ML Reportllm-create
Range: 2.00.000.0000 - 2.18.628.5980
Infraware/ML Reportcpe-rescue
Range: ML Report Between 2.00.000.0000 ~ 2.18.628.5980

Patches

Vulnerability mechanics

References

www.boho.or.kr/krcert/secNoticeView.donvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000